Either would work. If you add it to websiteMembership I recommend renaming the plugin websiteMembership_CUSTOM.php so it doesn't get accidentally overwritten when upgrading the plugin in future. You could add some custom code after where wsm_loginSuccess is listed.

Or if you add it to your website files you could put it on the login landing page. That would work as well.